Week 32, 2024 security incident report
Hacking and data breach incidents newly reported 2024.08.05 ~ 08.11
From August 5 to 11, 2024, six incidents were recorded in South Korea, with hacking targeting the Baekdu and Geumgang reconnaissance aircraft and the K2 tank emerging as the key issues. The leak of 559 student records from the Seoul Metropolitan Office of Education's high school credit system website and the exposure of personal data of Air Force hackathon participants continued a string of data exposures in the education and military sectors, and ransomware infections of order and delivery solutions used by a publisher and a logistics company were also confirmed. Across all incident types, personal data breaches were the most common at 28, followed by 19 hacking/intrusion incidents and 10 ransomware incidents, and cascading damage was seen spreading from OneBlood to Health First and from Netflix to Crunchyroll, LLC. Overseas, the leak of internal documents from the Trump presidential campaign drew the most coverage, while claims that 2.7 to 2.9 billion records of personal data were leaked from a US background-check company and a McLaren Health Care ransomware attack that disrupted care and exposed the data of about 743,000 patients stood out.
By type
- Data breach26
- Hacking & intrusion18
- Ransomware10
- DDoS1
- Phishing & smishing1
Key incidents in South Korea
Hacking targets South Korea's Baekdu and Geumgang reconnaissance aircraft and K2 tank
South Korea's Baekdu and Geumgang reconnaissance aircraft were hit by hacking. The K2 tank and electronic and signals intelligence aircraft were also named as targets of North Korean cyberattacks.
Related reports: 2 · last report →Seoul education office's high school credit system website leaks 559 student records
559Impact: 559 records of student personal information
The website of the Seoul Metropolitan Office of Education's High School Credit System Support Center was hacked, leaking 559 records of students' personal information. When the incident occurred, the specific attack method, and response measures have not been confirmed.
Read on 보안뉴스 ↗Personal data of Air Force creativity and innovation hackathon participants leaked
Impact: Personal information of hackathon participants
Personal information was leaked in connection with the Air Force Creativity and Innovation Idea Hackathon run by the Republic of Korea Air Force. The leaked data was the personal information of the event's participants.
Read on 보안뉴스 ↗Questions raised over Jeonbuk National University's improvements after DDoS attack
Questions were raised about Jeonbuk National University's response, given that it had also been hit by a DDoS attack a year earlier. Whether improvements had been made after that attack became the point of contention.
Read on 전북일보 인터넷신문 ↗Ransomware infects order and delivery solution used by publishers and logistics firms
An order and delivery solution was infected with ransomware. In connection with this, the possibility was raised that some 700 publishers and some 100 logistics companies had been hacked simultaneously.
Read on 보안뉴스 ↗SK Telecom acquittal upheld in e-prescription data leak case
An acquittal was finalized in the case over alleged personal data leaks from SK Telecom's electronic prescription service. The Supreme Court upheld the acquittal in the case.
Read on 경향신문 ↗
Supply-chain breaches
Mobile Guardian hack wipes more than 13,000 phones
Impact: More than 13,000 phones wiped
Device management service Mobile Guardian was hit by a cyberattack that wiped more than 13,000 phones. It also emerged that a student had raised security concerns about Mobile Guardian's device management system weeks before the attack.
Related reports: 3 · last report →
Also affected: 1- Ministry of Education (Singapore)Mobile Guardian security breach wipes 13,000 student devicesData wiped from 13,000 student devices
OneBlood ransomware attack disrupts blood supply, donor data stolen
Impact: Disruption of blood collection, testing and supply, and theft of donors' names and Social Security numbers
US blood supplier OneBlood suffered virtual machine encryption and system outages in a ransomware attack in July 2024. The switch to manual processes delayed blood collection, testing and distribution and sharply reduced operational capacity. A subsequent investigation confirmed that the attackers accessed the network and copied files from July 14 to 29, and that donors' names and Social Security numbers were also stolen.
Related reports: 13 · last report →
Hack of Netflix partner leaks unreleased footage
Impact: Unreleased footage including Arcane Season 2, Heartstopper Season 3 and Terminator Zero
A Netflix partner was hacked, leaking unreleased footage from Netflix and Crunchyroll online. The leaked material included episodes of titles such as Arcane Season 2, Heartstopper Season 3 and Terminator Zero. Netflix said it was taking active steps to respond to the leak.
Related reports: 5 · last report →
Also affected: 1- CrunchyrollCrunchyroll anime content leaked onlineAnime content leaked
Key incidents in other countries
Trump campaign emails hacked, internal documents leaked
Impact: Internal emails and communications and documents related to JD Vance leaked
The Trump campaign's emails were hacked, leaking internal communications and documents related to vice presidential candidate JD Vance. The campaign disclosed the breach on August 10, 2024, and blamed Iran, and US intelligence later confirmed Iran's hacking. The FBI launched an investigation, and US authorities charged three Iranians in September.
Related reports: 68 · last report →Hack of US background check firm leaks Social Security numbers and more at massive scale
2.9BImpact: Claimed leak of 2.7 billion to 2.9 billion records of personal information, including Social Security numbers and addresses
A hack of a US background check company leaked personal information, including Social Security numbers and addresses, online. Figures of 2.7 billion to 2.9 billion records were cited, but the actual number of people affected has not been confirmed. Lawsuits followed over issues such as inadequate breach notification, and the Missouri Attorney General also decided to investigate.
Related reports: 30 · last report →McLaren Health Care ransomware disrupts care, data of 743,000 leaked
743KImpact: Data of about 743,000 patients leaked; disruption of care and systems
In August 2024, McLaren Health Care suffered outages of its IT and phone systems and some patient services due to a ransomware attack. Radiation therapy and stroke care resumed, and systems and operations were restored later that month. In June 2025, the company notified about 743,000 patients of the data breach.
Related reports: 16 · last report →ADT hack exposes customer addresses, phone numbers and emails
Impact: Customer addresses, phone numbers and email addresses
Home security company ADT was hacked, exposing customers' addresses, phone numbers and email addresses. After the stolen data was posted on the dark web and a hacking forum, ADT acknowledged the breach and said the customer data exposed was limited.
Related reports: 13 · last report →Cash App class action settled over user data breach
Cash App users were affected by a data breach, leading to a class action lawsuit. A settlement totaling $15 million was reached, and users were told they could claim up to $2,500. Settlement payments were expected to begin in October 2026.
Related reports: 9 · last report →